Python. How to create your own Single Authentication + Application Authorization server?

Question

Django

Good day.
There was a need to create a single entry point to applications.
Two scenarios.
1. The authentication server checks the existence of the client and issues a token with which the client will access the application. The jwt token contains the user's powers and each client trusts them. Two problems: how to revoke the token. 2. How to authorize a user on services with Django (DRF).
2. The authentication server issues a token, and each service on django accesses it to check the credentials for the issued token and the validity of the token.
(in general, in the future, it is necessary to understand not only in jang who is coming to us, but also from third-party services)
Googled a lot, but everywhere we are talking about using a third-party identity provider in the form of google, twitter, etc.
Tell me, please, about existing libraries, solutions, maybe even manuals with such information (server and client to it)?

Answer 1

You misunderstand JWT. To check the token, you do not need to go anywhere. And you can't withdraw it.

Answer 2

django-rest-framework-sso